iblai-api-profile-metadata
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for interacting with the official platform API (api.iblai.app) to manage user metadata. All network operations are directed at the vendor's own infrastructure.
- [CREDENTIALS_UNSAFE]: The skill correctly uses environment variables ($IBLAI_API_KEY) for authentication instead of hardcoding secrets. It also includes a security best practice section explicitly warning users never to store secrets like passwords or PII in the metadata store.
- [DATA_EXFILTRATION]: No evidence of data exfiltration was found. The skill processes user metadata within the context of the platform's API as intended.
- [COMMAND_EXECUTION]: The provided curl examples are for educational purposes, demonstrating how to interact with the API endpoints. No malicious shell command execution patterns were detected.
- [PROMPT_INJECTION]: No prompt injection or behavior override patterns were identified in the instructions.
Audit Metadata